I just listened to the Software Daily podcast on Permit.io and it seemed interesting. I had to implement authorization for a complex enterprise app a decade ago and I wound up coming up with a fairly sophisticated ABAC solution before I even heard the term ABAC. But it does have some limitations and it was a bit difficult to configure. It's that time of year again and I need to add authorization into another enterprise product. I'll definitely give this a whirl before I try rolling my own again.
Co-founder of Cerbos here.
Please check out Cerbos too. We focused on making the implementation and configuration as simple as possible.
Solution seems interesting - never really questioned the paradigm of coupling perms with app code before. I can see how it can become unsustainable quite quickly as the company scales though.
The link you provided contains a trailing slash. The site doesn't load unless you remove it.
Ah sorry - looks like HN doesn't let me update the post :(. Will need to repost it